Adaptive trust negotiation and access control

Electronic transactions regularly occur between business partners in separate security domains. Trust negotiation is an approach that provides an open authentication and access-control environment for such transactions, but it is vulnerable to malicious attacks leading to denial of service or leakage of sensitive information. This paper introduces an Adaptive Trust Negotiation and Access Control (ATNAC) framework to solve these problems. The framework combines two existing systems, TrustBuilder and GAA-API, to create a system with more flexibility and responsiveness to attack than either system currently provides. Categories and Subject Descriptors D.4.6 [Operating Systems]: Security and protection – access controls, authentication. K.6.5 [Management of Computing and Information Systems]: Security and protection – authentication. General Terms Security. Keywords Access control, trust negotiation, adaptive systems, denial of service.

• Type: Conference
• Year: 2005
• Where: SACMAT
• Authors: Tatyana Ryutov, Li Zhou, B. Clifford Neuman, Travis Leithead, Kent E. Seamons
• Keywords: Access Control, Adaptive Trust Negotiation, SACMAT 2005, Trust Negotiation